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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

• Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above Is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply Is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply v^thin the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

• Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

^)M Responsive to communication(s) filed on 11 May 2000 . 
2a)n This action is FINAL. 2b)S This action is non-final. 

3) 0 Since this application is in condition for allowance except for fonrial matters, prosecution as to the nnerits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 21 3. 

Disposition of Claims 

4) ^ Claim(s) 1-14 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) S Claim(s) 7-74 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)n accepted or bO objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

11) 0 The proposed drawing correction filed on is: a)n approved b)n disapproved by the Examiner. 

If approved, con-ected drawings are required in reply to this Office action. 

12) n The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

1 3) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 

aOAII b)n Some*c)n None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (POT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 11 9(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) n Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 . 
Attachment(s) 

1) 13 Notice of References Cited (PTO-892) 4) O Interview Summary {PTO-41 3) Paper No(s). . 

2) O Notice of Draflsperson*s Patent Drawing Review (PTO-948) 5) □ Notice of Informal Patent Application (PTO-1 52) 

3) S Information Disclosure Statement(s) {PTO-1449) Paper No(s) 2 . 6) □ Other 
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DETAILED ACTION 



Information Disclosure Statement 

The information disclosure statement filed May 1 1 , 2000 has been placed in the 
application file and the information referred to therein has not been considered as to the 
merits. 



Specification 

The disclosure is objected to because of the following informalities: 

On page 8, line 7, the non-volatile memory module is listed as element 404, 

however, in Figure 5, element 404 is the RAM and element 406 is the non-volatile 

memory module. 

Appropriate correction is required. 



Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C, 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371 (c) of this 
title before the invention thereof by the applicant for patent. 

Claims 1-14 are rejected under 35 U.S.C. 102(e) as being anticipated by U.S. 
patent 5.812,671 granted to Ross, Jr. 
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Regarding claim 1, Ross meets the claimed limitations as follows: 
"A system for receiving and transmitting secure data on a server computer using 
a shared key, comprising: 

an encrypt/decrypt engine for encrypting and decrypting data using the 
shared key; 

a database of user shared keys for encrypting and decrypting data for a 
specific user." see column 1, line 60 to column 2, line 10; column 3, lines 1-23 and 
column 3, line 45 to column 4, line 3. 

Regarding claim 2, Ross meets the claimed limitations as follows: 
'The system of claim 1, further including a secure data database for storing 
encrypted data, and a private server key for encrypting and decrypting data 
stored on the server." see column 2, lines 1-19. 

Regarding claim 3, Ross meets the claimed limitations as follows: 
"The system of claim 1, wherein the encrypt/decrypt engine uses a symmetric key 
encryption/decryption algorithm for encrypting and decrypting data." see column 

1, line 65 to column 2, line 5; column 2, lines 53-56 and column 3, lines 9-15. 

Regarding claim 4, Ross meets the claimed limitations as follows: 
"The system of claim 1, further including a web server engine programmed to 
allow a user to send data securely using the encrypt/decrypt engine." see column 

2, line 66 to column 3, line 23. 

Regarding claim 5, Ross meets the claimed limitations as follows: 
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"The system of claim 1, further including a web server engine programmed to 
allow a user to receive secure data using the encrypt/decrypt engine." see column 
2, line 66 to column 3, line 23. 

Regarding claim 6, Ross meets the claimed limitations as follows: 
"A method for receiving secure data on a server computer using a shared key, 
comprising the steps of: 

receiving data on the server computer from a user, wherein the data is 
encrypted with a user's key shared between the user and the server computer; 

decrypting the data with the user's key into decrypted data; 

and processing the decrypted data." see column 1 , line 60 to column 2, line 
10; column 3, lines 1-23 and column 3, line 45 to column 4, line 3. 

Regarding claim 7, Ross meets the claimed limitations as follows: 
"The method of claim 6, wherein processing the decrypted data includes the 
steps of: 

encrypting the decrypted data with a private server key; 

and storing the encrypted data in a database. " see column 2, lines 1-19. 

Regarding claim 8, Ross meets the claimed limitations as follows: 
"The method of claim 7, wherein processing the decrypted data further includes 
the steps of: 

decrypting the encrypted data with the private server key; 
encrypting the data with a second user's key shared between the second 
user and the server computer; 
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and sending the encrypted data to the second user." see column 3, lines 19- 
23 and column 3, lines 55-64. 

Regarding claim 9, Ross meets the claimed limitations as follows: 
"The method of claim 8, wherein the encrypted data send to the second user can 
only be viewed on a computer screen by the second user." see column 2, lines 5-7 
and column 3, lines 52-64. 

Regarding claim 10, Ross meets the claimed limitations as follows: 
"The method of claim 6, wherein processing the decrypted data further includes 
the steps of: 

processing the data according to the user's instructions into processed 

data; 

encrypting the processed data using the user's shared key; 

and sending the encrypted processed data to the user. " see column 3, lines 
19-23 and column 3, lines 55-64. 

Regarding claim 11, Ross meets the claimed limitations as follows: 
"A computer-readable medium comprising program instructions for receiving 
secure data on a server computer using a shared key, comprising the steps of: 

receiving data on the server computer from a user, wherein the data is 
encrypted with a user's key shared between the user and the server computer; 

decrypting the data with the user's key into decrypted data; 

and processing the decrypted data. " see column 1, line 60 to column 2, line 
10; column 3, lines 1-23 and column 3. line 45 to column 4, line 3. 
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Regarding claim 12, Ross meets the claimed limitations as follows: 
"The computer-readable medium of claim 11, wherein processing the decrypted 
data includes the steps of: 

encrypting the decrypted data with a private server key; 

and storing the encrypted data in a database. " see column 2, lines 1-19. 

Regarding claim 13, Ross meets the claimed limitations as follows: 
"The computer-readable medium of claim 12, wherein processing the decrypted 
data further Includes the steps of: 

decrypting the encrypted data with the private server key; 

encrypting the data with a second user's key shared between the second 
user and the server computer; 

and sending the encrypted data to the second user. " see column 3, lines 19- 
23 and column 3, lines 55-64. 

Regarding claim 14, Ross meets the claimed limitations as follows: 
"The computer-readable medium of claim 11, wherein processing the decrypted 
data further includes the steps of: 

processing the data according to the user's instructions into processed 

data; 

encrypting the processed data using the user's shared key; 
and sending the encrypted processed data to the user. " see column 3, lines 
19-23 and column 3, lines 55-64. 
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Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

A. Barnes et al (5,970,475) discloses an electronic commerce system enabling 
users to purchase goods and supplies over the Internet. 

B. Smithies et al (6,091 ,835) discloses a system for electronically affirming the 
recorded history of an event or transaction by a party member. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Matthew B Smithers whose telephone number is (703) 
308-9293. The examiner can normally be reached on Monday-Friday (9:00-5:30) EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert DeCady can be reached on (703) 305-9595. The fax phone 
numbers for the organization where this application or proceeding is assigned are (703) 
305-0040 for regular communications and (703) 305-9051 for After Final 
communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 



Matthew Smithers 
September 29, 2001 



